2
If you have an update service that's running on a server listening for connections on some random port, how could one verify that any requests coming into that port are from the specific application that I create?
For instance, how does Microsoft know that when Windows checks for an update, it is coming from Windows XP/Vista/7 instead of someone sending it malformed packets?
Why would it care? If something is broken, what difference does it make what you send it? It won't do the right thing no matter what anyway. – David Schwartz – 2012-03-13T23:24:01.937